If Device maintenance app is launched in Samsung S8, after pressing Clean Now button, storage cleanup briefly shows different apps, storage space of which is being cleaned:

System cache
OneNote
TopBuzz

Actual view visible for about 2 seconds:

I know that the last one is not among installed apps (when checking by name) so it must be part of some other app, but how can I find out to which app it actually belongs? No antivirus which I tried so far reported this as the malware. But maybe there is some system analyzer which shows similar cache ownership like the above app, but with more details?

(Or maybe there is another method how to find origin of that TopBuzz symptom.)

Enable 'Show Systemapps' in SD Maid's AppControl settings and after a scan just search for "buzz", if it is a distinct app it should find something. Search will look for both packagenames and app names of all types of apps except maybe instant apps if you don't have root. (sd maid dev)
– darkenJan 11 at 8:25

@darken – perfect tip... you probably meant Settings > AppControl > Include System-Apps ...and the "buzz" was not found. I wonder what tricks are played here by system.
– miroxlavJan 11 at 16:28